Senior Application Security Engineer

One Identity

. Threat model authentication and session handling, privilege elevation paths, connector and integration boundaries, tenant isolation, cryptographic handling, and secrets handling .

Posted 10/6/2026full-timeRemote • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including threat modeling, secure coding practices, and vulnerability management. Proficient in C# and .NET, with experience in AI-assisted development and security tooling.

Highest-signal resume keywords

Application Security ExperienceThreat ModelingC# and .NET ProficiencyStatic and Dynamic Analysis ToolingCoordinated Vulnerability Disclosure

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecure Coding PracticesApplication SecurityStatic AnalysisDynamic TestingSoftware Composition AnalysisCryptographic ReviewCode ReviewAI-Enabled Security ToolingVulnerability Management

Tools & Technologies

C#.NETJavaAI-Assisted Development ToolsSecurity Tooling

Industry Keywords

CVE HandlingOAuthOIDCSAMLSCIMSBOMPCI DSSFedRAMPSecurity Champions ProgramLicense Compliance

Tech Stack

Tools & technologies

Java.NET

About the role

Key responsibilities & impact

Threat model authentication and session handling, privilege elevation paths, connector and integration boundaries, tenant isolation, cryptographic handling, and secrets handling
Set security requirements during architecture and design stages
Advise product and engineering leadership on risk acceptance and release decisions
Submit, review, and implement security fixes in product repositories with commit access
Own static analysis, dependency scanning, and dynamic testing across product lines
Tune security tooling and route findings to responsible engineering teams
Improve secure coding practices across .NET and Java codebases through patterns, libraries, reference implementations, and code review
Define review and automated remediation practices for AI-generated code
Own product vulnerability response from intake through triage, coordinated disclosure, CVE handling, and customer advisories
Convert penetration testing and bug bounty findings into fixes and systemic improvements
Own software composition analysis and SBOM generation, including license and provenance data
Produce product security evidence for customer questionnaires, security reviews, and certification work
Work across every product line as the security representative embedded in engineering

Requirements

What you’ll need

Six or more years in software engineering or security, with at least three focused on application or product security
Equivalent depth counts
Application security experience on a product that customers deploy and operate themselves
Code-level fluency in C# and .NET, with sufficient range to work in a Java codebase
Ability to read and write production code
Hands-on work with AI-assisted development or AI-enabled security tooling within the last six months
Considered view on the use of AI in the security review pipeline
Experience with threat modeling at design time
Experience with static, dynamic, and software composition analysis tooling
Knowledge of identity and authentication protocols including OAuth, OIDC, SAML, and SCIM
Experience with coordinated vulnerability disclosure and CVE handling
Secure code review experience across web and API surfaces
SBOM standards and license compliance knowledge helpful
Cryptographic review experience helpful
Security champions program experience helpful
PCI DSS or FedRAMP experience applied to a product helpful
Prior product engineering experience helpful

Benefits

Comp & perks

Health and wellness programs
Career development and learning opportunities
Equal employment opportunity and non-discrimination workplace